long expectedValue = 123456789012345L;
        NdrHyper ndrHyper = new NdrHyper(expectedValue);
        assertEquals(expectedValue, ndrHyper.value, "Constructor should set the correct value.");
    }

    @Test
    void testEncode() throws NdrException {
        // Test the encode method
        long testValue = 987654321098765L;
        NdrHyper ndrHyper = new NdrHyper(testValue);

        assertTrue(bytesWritten > 0);

        // Verify data is written at correct offset
        assertEquals(3, dst[startOffset]);

        // Verify total parameter count at correct offset
        assertEquals(500, SMBUtil.readInt4(dst, startOffset + 3));

        // Verify total data count at correct offset
        assertEquals(1000, SMBUtil.readInt4(dst, startOffset + 7));
    }

    @Test

Of course, the attackers would not try all this by hand, they would write a program to do it, possibly with thousands or millions of tests per second. And they would get just one extra correct letter at a time.

But doing that, in some minutes or hours the attackers would have guessed the correct username and password, with the "help" of our application, just using the time taken to answer.

#### Fix it with `secrets.compare_digest()` { #fix-it-with-secrets-compare-digest }

    class FlagConstantsTests {

        @Test
        @DisplayName("Should have correct shared lock flag value")
        void testSharedLockFlag() {
            assertEquals(0x1, Smb2Lock.SMB2_LOCKFLAG_SHARED_LOCK);
        }

        @Test
        @DisplayName("Should have correct exclusive lock flag value")
        void testExclusiveLockFlag() {

    private TestRequestWithPath testImplementation;

    @BeforeEach
    void setUp() {
        testImplementation = new TestRequestWithPath();
    }

    @Test
    @DisplayName("Test getPath returns correct path")
    void testGetPath() {
        // Test with mock
        String expectedPath = "/share/folder/file.txt";
        when(requestWithPath.getPath()).thenReturn(expectedPath);

        SamrAliasHandle aliasHandle = new SamrAliasHandle(mockDcerpcHandle, mockSamrDomainHandle, access, rid);

        // Assert
        assertNotNull(aliasHandle);
        // Verify that sendrecv was called with the correct MsrpcSamrOpenAlias object
        ArgumentCaptor<MsrpcSamrOpenAlias> rpcCaptor = ArgumentCaptor.forClass(MsrpcSamrOpenAlias.class);
        verify(mockDcerpcHandle).sendrecv(rpcCaptor.capture());

        testState = Smb2LeaseState.SMB2_LEASE_READ_WRITE;
        leaseContext = new LeaseV1CreateContextRequest(testKey, testState);
    }

    @Test
    @DisplayName("Should have correct context name")
    void testContextName() {
        assertArrayEquals("RqLs".getBytes(), leaseContext.getName());
        assertEquals("RqLs", LeaseV1CreateContextRequest.CONTEXT_NAME);
    }

    @Test

		t.Errorf("Count() method should get correct value, expect: %v, got %v", count, len(users))
	}

	if err := DB.Model(&User{}).Where("name = ?", user1.Name).Or("name = ?", user3.Name).Count(&count).Find(&users).Error; err != nil {
		t.Errorf(fmt.Sprintf("Count should work, but got err %v", err))
	}

	if count != int64(len(users)) {
		t.Errorf("Count() method should get correct value, expect: %v, got %v", count, len(users))
	}

        assertEquals(0x00, trans.maxSetupCount);
        assertEquals(2, trans.setupCount);
        assertEquals("\\PIPE\\", trans.name);
    }

    @Test
    @DisplayName("Test writeSetupWireFormat writes correct data")
    void testWriteSetupWireFormat() {
        // Arrange
        TransTransactNamedPipe trans = new TransTransactNamedPipe(mockConfig, TEST_FID, TEST_DATA, TEST_OFFSET, TEST_LENGTH);
        byte[] dst = new byte[10];

        assertTrue(result.contains("informationLevel=0x101"), "String should contain the correct information level.");
        assertTrue(result.contains("filename=test.txt"), "String should contain the correct filename.");
        assertTrue(result.endsWith("]"), "String should end with a closing bracket.");
    }